Introduction

Kunpeng BoostKit for Confidential Computing TrustZone Kit is an Arm TrustZone–based software kit, including the Huawei-developed trusted execution environment (TEE) secure OS iTrustee, iBMC and BIOS of the Kunpeng server, and open-source OS driver and SDK. It helps to build confidential computing solutions and aims to provide integrity, confidentiality protection, and trusted use for your key data.

Standard Kunpeng servers do not include the full TrustZone kit by default. To obtain the kit, you must explicitly select the TEE-enabled configuration when purchasing. Kunpeng servers supporting the TEE feature will have the TrustZone kit pre-installed at the factory

Based on TrustZone, iTrustee offers a complete security solution, including a client application (CA) in normal mode, a trusted application (TA) in secure mode, and a trusted OS in secure mode.

This document describes:

• Features provided by TrustZone.
• How to use these features on Kunpeng servers on which TrustZone is enabled.